My work life has been very distracting these past few months. I’m not quite out of the woods yet, but things should calm down a bit over the next few weeks, which should give me a chance to have some fun here again.

My apologies to folks reporting bugs or asking for advice. Your pleas are not lost on me, and I’ll make a point to fix the known bugs, and generally try to be a wee bit more helpful.

As much as it itches me, I’ll try hard not to start some new project yet, at least not until I feel better about the state of the existing stuff.

Anyway, here’s my tentative TODO list for now:

isSigned() chokes on a certificate served for www.openssl.org. That’s probably a clue my ASN-1 parsing sucks. I have an incomplete but potentially much better parsing method for ASN-1 (based on *gasp* actually reading a spec), so that might be the way to go there.

There’s something rotten in my BigInteger implementation, which seems to result in RSA key lengths being occasionally off.

Fix some TLS bugs (Andy’s parsing bugs, at least)

Implement some missing bits of TLS (to at least get https://api.del.icio.us/v1/tags/get to load.)

Check RSAKeyTest::testPem2(), since it might be broken.

Update the Eval library with a recent tamarin dump, and fix the newline problem in the test app.

I’ve been using your PDML code and I think it’s a very useful project.
At this moment the your project has not been updated for 4 years, so I
guess your busy with other things.
If you want I can help you with putting new life into this project. I
can help you with : php code, documentation, forum.

ps: Sorry that I’m using your blog to post you about this but the email adres on sourceforge doesn’t work anymore.

I’m looking into a way to generate a dynamic proxy of an arbitrary interface definition in AS3. Because it is not possible to dynamically type cast a dynamically constructed object to an interface in AS3, I though it may be possible to use the Eval library to compile generated code at runtime and load it into the interpreter. Looking through the source it seems that the “implements INTERFACE” tokens get lexed but the parsing of this is not yet implemented. I see you have some mild plans to update the library sometime soon. Would this update encompass being able to generate dynamic instances of interfaces?

Shouldn’t the verify function return a bool to say whether the signature is valid. How do I use the verify function to check using a public key wheather a string was actually signed by a particular private key.